Weaknesses of type CWE-476

2,331 results

Desreferência de nulo autenticada remota

A aplicação não valida corretamente se um ponteiro ou referência é nulo antes de usá-lo, permitindo que um usuário autenticado remotamente forneça entrada que causa uma desreferência de nulo. O resultado é um crash da aplicação ou, em cenários mais graves, execução de código não prevista, dependendo de como a memória é tratada.

Example

Um endpoint de API autenticada que busca um usuário por ID, mas não verifica se o resultado da busca é nulo. Um atacante autenticado fornece um ID inexistente, o código tenta acessar propriedades do resultado nulo e a aplicação falha ou se comporta de forma imprevista.

How to mitigate

Sempre validar retornos de funções que podem ser nulos antes de acessar seus membros ou métodos. Use assertions, verificações explícitas (if obj != null) ou mecanismos de linguagem como optional/Maybe types para forçar o tratamento seguro de valores nulos.

CVE-2024-41883MEDIUMNull Pointer DereferenceEPSS 0.6%CVE-2025-46404HIGHA denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specialEPSS 0.6%CVE-2025-24997MEDIUMDirectX Graphics Kernel File Denial of Service VulnerabilityEPSS 0.6%CVE-2023-33307MEDIUMA null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to dEPSS 0.6%CVE-2024-44856HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component naEPSS 0.6%CVE-2024-44853HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component coEPSS 0.6%CVE-2024-44855HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component naEPSS 0.6%CVE-2024-44854HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smEPSS 0.6%CVE-2025-56363HIGHA null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute functiEPSS 0.6%CVE-2025-2487MEDIUM389-ds-base: null pointer dereference leads to denial of serviceEPSS 0.6%CVE-2024-42491MEDIUMA malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is usedEPSS 0.6%CVE-2025-35966HIGHA null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crEPSS 0.6%CVE-2024-51738HIGHSunshine improperly enforces pairing protocol request orderEPSS 0.6%CVE-2025-48498HIGHA null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number ofEPSS 0.6%CVE-2025-59836MEDIUMOmni is Vulnerable to DoS via Empty Create/Update Resource RequestsEPSS 0.6%CVE-2025-58472LOWQsync CentralEPSS 0.6%CVE-2024-0209HIGHNULL Pointer Dereference in WiresharkEPSS 0.6%CVE-2024-46922HIGHAn issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpuEPSS 0.6%CVE-2025-65411HIGHA NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injectiEPSS 0.6%CVE-2024-50145HIGHocteon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()EPSS 0.6%